InitSajysskn
Static task
static1
Behavioral task
behavioral1
Sample
cc193a37d2ec6ba5a6043e24e11e563e2770fa3fcca90989526b049e171539a8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cc193a37d2ec6ba5a6043e24e11e563e2770fa3fcca90989526b049e171539a8.exe
Resource
win10v2004-20221111-en
General
-
Target
cc193a37d2ec6ba5a6043e24e11e563e2770fa3fcca90989526b049e171539a8
-
Size
40KB
-
MD5
45e1874c446493ea102bf96b5f823fae
-
SHA1
52e301fbc450442587fdc34b5ae931fb5dcd79ff
-
SHA256
cc193a37d2ec6ba5a6043e24e11e563e2770fa3fcca90989526b049e171539a8
-
SHA512
d918ca19fc2ad89934b222afc6baadfb1b9b9209d1b61d813b167f62698600349dd94721971753e6c07f5a5fb74c81494d8c1fd270e334ee4507f60981365eab
-
SSDEEP
768:/F/6PUqdFG7WTsCRsgpHcX9hqKoVNkahx/OFlJjNa2B08wUVB:/56ndFGSNmlhqbVNb+JjYdw
Malware Config
Signatures
Files
-
cc193a37d2ec6ba5a6043e24e11e563e2770fa3fcca90989526b049e171539a8.exe windows x86
702875ad60df17cf6e045e188f886ec7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GlobalUnlock
GetCommandLineA
GetStartupInfoA
ExitProcess
ntdll
ZwQueryMutant
ZwSystemDebugControl
ZwSystemDebugControl
RtlxOemStringToUnicodeSize
NtFlushKey
NtDisplayString
ZwRequestWakeupLatency
RtlAppendUnicodeToString
_ultoa
RtlNtStatusToDosError
RtlEqualComputerName
NtOpenMutant
ZwTerminateThread
_aulldiv
sin
RtlLargeIntegerDivide
RtlGenerate8dot3Name
ZwProtectVirtualMemory
Exports
Exports
Sections
.ldata Size: 4KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_PAGELK Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ